Commit Graph
97 Commits
Author SHA1 Message Date
renovate[bot] 6bb5698787 chore(production): update ghcr.io/external-secrets/charts/external-secrets docker tag to v2.9.0 (#213)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-12 13:29:43 -04:00
renovate[bot] 797fde6293 chore(production): update netbirdio/netbird docker tag to v0.76.2 (#212) 2026-08-12 13:14:25 -04:00
renovate[bot] eb1be3e853 chore(production): update ghcr.io/stakater/charts/reloader docker tag to v2.2.16 (#211) 2026-08-12 13:13:52 -04:00
renovate[bot] 29acf8a080 chore(production): update ghcr.io/prometheus-community/charts/prometheus-operator-crds docker tag to v31.0.1 (#210) 2026-08-12 13:13:31 -04:00
renovate[bot] 6b7ed9f600 chore(production): update ghcr.io/aureq/charts/cert-manager-webhook-ovh docker tag to v0.9.15 (#209) 2026-08-12 13:13:01 -04:00
Devin Buhl ea4da634ec fix(o11y): bump vm-k8s-stack to 0.90.2 so rule scoping parses again (#208)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-08-12 12:26:07 -04:00
renovate[bot] f67df09429 chore(base): update ghcr.io/prometheus-community/charts/prometheus-operator-crds docker tag to v31.0.1 (#200) 2026-08-12 11:26:02 -04:00
renovate[bot] 6a8992de31 chore(base): update ghcr.io/stakater/charts/reloader docker tag to v2.2.16 (#201) 2026-08-12 11:11:13 -04:00
renovate[bot] 0c1f518661 chore(base): update ghcr.io/external-secrets/charts/external-secrets docker tag to v2.9.0 (#204) 2026-08-12 10:41:32 -04:00
renovate[bot] 2552c57849 chore(base): update ghcr.io/aureq/charts/cert-manager-webhook-ovh docker tag to v0.9.15 (#199) 2026-08-12 10:40:46 -04:00
Devin Buhl 1dd5d6b437 chore(o11y): o11y region label becomes global; document airport-code convention (#197)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-08-07 08:33:54 -04:00
Devin Buhl 73c565f11b feat(o11y): scope Grafana's default datasource to this cluster (#196)
Final step of the folder isolation work: the chart's datasources are
replaced by hand-written ones, and the default VictoriaMetrics datasource
(same uid, so dashboards and alerts resolve unchanged) now routes through
vmauth-self-select, which forces extra_label=cluster onto every request.
Anything that does not explicitly pick the VictoriaMetrics Fleet
datasource only sees this cluster's own series, including template
variable and metadata queries.

Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-08-06 20:18:45 -04:00
Devin Buhl f71208bb6a feat(o11y): self-select vmauth proxy and Fleet datasource (#195)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-08-06 11:50:07 -04:00
Devin Buhl d168175360 fix(o11y): enable gateway_support so the operator gets HTTPRoute RBAC (#194)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-08-06 10:10:34 -04:00
Devin Buhl a9bd98112d fix(o11y): scope vmalert rule evaluation via datasource extra_label (#193)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-08-06 09:18:50 -04:00
renovate[bot] 9abbcc94dc chore(production): update ghcr.io/victoriametrics/helm-charts/victoria-metrics-k8s-stack docker tag to v0.90.0 (#180) 2026-08-06 09:06:44 -04:00
renovate[bot] 115c9370e7 chore(base): update ghcr.io/victoriametrics/helm-charts/victoria-metrics-k8s-stack docker tag to v0.90.0 (#179) 2026-08-06 08:47:05 -04:00
renovate[bot] 709205e561 chore(production): update ghcr.io/external-secrets/charts/external-secrets docker tag to v2.8.0 (#187) 2026-08-06 08:41:29 -04:00
renovate[bot] 6b856dd873 chore(production): update ghcr.io/cloudnative-pg/charts/cloudnative-pg docker tag to v0.29.0 (#186) 2026-08-06 08:40:30 -04:00
renovate[bot] 08b488efd4 chore(production): update ghcr.io/spegel-org/helm-charts/spegel docker tag to v0.7.4 (#184) 2026-08-06 08:40:07 -04:00
renovate[bot] 546195b67b chore(production): update ghcr.io/home-operations/charts/echo docker tag to v0.2.2 (#188) 2026-08-06 08:39:52 -04:00
renovate[bot] 048e0721ae chore(production): update mirror.gcr.io/envoyproxy/gateway-helm docker tag to v1.8.3 (#190) 2026-08-06 08:39:05 -04:00
renovate[bot] e85b6bfa58 chore(production): update ghcr.io/stakater/charts/reloader docker tag to v2.2.14 (#185) 2026-08-06 08:38:36 -04:00
renovate[bot] c02e1250d5 chore(production): update netbirdio/netbird docker tag to v0.76.1 (#191) 2026-08-06 08:38:18 -04:00
renovate[bot] 8c8f3a59da chore(production): update ghcr.io/openebs/charts/openebs docker tag to v4.5.1 (#189) 2026-08-06 08:37:58 -04:00
renovate[bot] bb9d16e069 chore(production): update quay.io/jetstack/charts/cert-manager docker tag to v1.21.1 (#192) 2026-08-06 08:37:31 -04:00
renovate[bot] 03ad0c57ba chore(production): update ghcr.io/home-operations/charts-mirror/metrics-server docker tag to v3.13.1 (#183) 2026-08-06 08:36:26 -04:00
renovate[bot] 13d687efc3 chore(production): update ghcr.io/aureq/charts/cert-manager-webhook-ovh docker tag to v0.9.14 (#182) 2026-08-06 08:35:54 -04:00
renovate[bot] 6645308ed3 chore(production): update ghcr.io/prometheus-community/charts/prometheus-operator-crds docker tag to v31 (#181) 2026-08-06 08:32:51 -04:00
renovate[bot] d4bc925a13 chore(base): update netbirdio/netbird docker tag to v0.76.1 (#170) 2026-08-06 08:32:26 -04:00
renovate[bot] 3509242036 chore(production): update ghcr.io/victoriametrics/helm-charts/victoria-logs-collector docker tag to v0.3.7 (#178) 2026-08-06 08:30:30 -04:00
renovate[bot] cef3652d7a chore(production): update ghcr.io/victoriametrics/helm-charts/victoria-logs-cluster docker tag to v0.2.8 (#177) 2026-08-06 08:30:01 -04:00
Devin Buhl a5a99af044 feat(o11y): five-label telemetry identity and correct cluster attribution (#175)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-08-06 08:14:00 -04:00
renovate[bot] 19ca3a8853 chore(base): update netbirdio/netbird docker tag to v0.76.0 (#144) 2026-08-05 09:36:01 -04:00
renovate[bot] a9394fa98d chore(base): update ghcr.io/prometheus-community/charts/prometheus-operator-crds docker tag to v31 (#168) 2026-08-05 08:25:14 -04:00
renovate[bot] 857ffe4dfe chore(base): update quay.io/jetstack/charts/cert-manager docker tag to v1.21.1 (#161) 2026-08-05 08:24:37 -04:00
Devin Buhl 34a5f6eabd feat(rootly): use dedicated ROOTLY_DISCORD_WEBHOOK for alert workflows (#156)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-30 13:07:21 -04:00
Devin Buhl 2a9b50ac92 fix(envoy): structured access logs with _msg, errors-only on mesh gateway (#155)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-30 11:34:49 -04:00
Devin Buhl 9cca6c8152 feat(rootly): tighten heartbeat cadence to 2m pings / 5m expiry (#154)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-30 10:12:32 -04:00
renovate[bot] 085bdf0fe1 chore(base): update ghcr.io/home-operations/charts/echo docker tag to v0.2.2 (#150) 2026-07-29 13:27:52 -04:00
Devin Buhl b492894d44 feat: add initial rootly integration (#152)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-29 12:48:28 -04:00
Devin Buhl f62fc2f3bf feat(grafana): replace heartbeat with core infrastructure and delivery alerts (#151)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-28 11:30:04 -04:00
Devin Buhl d20079b97b refactor(flux): dedup per-env Kustomizations into base ks.yaml+app layout (#147)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-24 12:49:03 -04:00
Devin Buhl f027e07c9c fix(grafana): consolidate the Discord alert into a single embed (#146)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-24 06:49:01 -04:00
Devin Buhl ec188a653b feat(grafana): clean up Discord notifications and route by grafana_folder (#141)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-24 06:24:47 -04:00
renovate[bot] fb5e7eb6df chore(base): update mirror.gcr.io/envoyproxy/gateway-helm docker tag to v1.8.3 (#134) 2026-07-23 21:44:29 -04:00
Devin Buhl d8511212d7 feat: grafana dashboards + alerting overhaul (discord, oci bundle, folders, cnpg, o11y alerts) (#140)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-23 20:37:46 -04:00
renovate[bot] bf0b54ee65 chore(base): update netbirdio/netbird docker tag to v0.74.7 (#131) 2026-07-22 16:02:24 -04:00
renovate[bot] 4ff9211aa6 chore(base): update ghcr.io/victoriametrics/helm-charts/victoria-metrics-k8s-stack docker tag to v0.87.0 (#126) 2026-07-22 16:02:04 -04:00
Devin Buhl 17b89441a1 feat: o11y perf tuning, grafana HA alerting, and envoy observability (#130)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-22 13:49:00 -04:00